CVE-2025-7048: On affected platforms running Arista EOS with MACsec configuration, a specially crafted packet can cause the MACsec process to terminate unexpectedly. Continuous receipt of these packets with certain MACsec configurations can cause longer term disruption o

Published Jan 6, 2026

Updated

On affected platforms running Arista EOS with MACsec configuration, a specially crafted packet can cause the MACsec process to terminate unexpectedly. Continuous receipt of these packets with certain MACsec configurations can cause longer term disruption of dataplane traffic.

Affected Software

1 affected component

Arista EOS

Remediation

Information

The recommended resolution is to upgrade to a remediated software version at your earliest convenience. Arista recommends customers move to the latest version of each release that contains all the fixes listed below. For more information about upgrading see EOS User Manual: Upgrades and Downgrades https://www.arista.com/en/um-eos/eos-upgrades-and-downgrades CVE-2025-7048 has been fixed in the following releases: * 4.35.0F and later releases * 4.34.4M and later releases in the 4.34.x train * 4.33.6M and later releases in the 4.33.x train * 4.32.8M and later releases in the 4.32.x train * 4.31.10M and later releases in the 4.31.x train

Event History

Jan 6, 2026

CVE Published

via MITRE·07:15 PM

Data Sourced

via MITRE·07:15 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·08:16 PM

DescriptionSeverityWeakness

Mar 17, 57987

Event

via NVD·11:22 PM

Frequently Asked Questions

What is the severity of CVE-2025-7048?

CVE-2025-7048 is considered a critical vulnerability as it can disrupt dataplane traffic.

How do I fix CVE-2025-7048?

To mitigate CVE-2025-7048, you should apply the latest security patches provided by Arista for EOS.

What types of systems are affected by CVE-2025-7048?

CVE-2025-7048 affects platforms running Arista EOS with MACsec configuration.

What impact does CVE-2025-7048 have on network performance?

CVE-2025-7048 can cause unexpected termination of the MACsec process, resulting in potential long-term disruption of network traffic.

Is CVE-2025-7048 reversible once it occurs?

Once CVE-2025-7048 is triggered, you may need to restart the MACsec process and potentially reroute traffic to restore normal operations.